(12) INTERNATIONAL APPLICATION PUBLISHED UNDER THE PATENT COOPERATION TREATY (PCT) 



(19) World Intellectual Property Organization 
Internationa] Bureau 

(43) International Publication Date 
9 October 2003 (09.10.2003) 




PCT 



iliiiiiiiiiiiiiniiiiiiiiii 

(10) International Publication Number 

wo 03/084167 Al 



(51) Intemational Patent Classification'^: 
12/24 



H04L 29/06. 



(21) International Application Number: PCT/GB03/01202 

(22) International Filing Date: 21 March 2003 (21.03.2003) 

(25) Filing Language: English 

(26) Publication Language: English 



(30) Priority Data: 

02252324.5 
0229831.3 



28 March 2002 (28.03.2002) EP 
20 December 2002 (20.12.2002) GB 



(71) Applicant (for all designated States except US): BR ITISH 
TELECOMMUNICATIONS PUBLIC LIMITED 
COMPANY [GB/GB]; 81 NEWGATE STREET, LON- 
DON EC1A7AJ (GB). 

(72) Inventors; and 

(75) Inventors/Applicants (for US only): HERON, Andrew, 
Peter [GB/GB]; BRINCLIFFE, LOWER FARM ROAD, 
RINGSHALL, STOWMARKET, Suffolk IP 14 2JE 
(GB). BURGESS, Gary, Dean [GB/GB]; 43 CRABBE 
STREET, IPSWICH. Suffolk IP4 5HR (GB). 



(74) Agent: LLOYD, Barry, George, Willi; BT GROUP 
LEGAL INTELLECTUAL PROPERTY DEPARTMENT. 
HOLBORN CENTRE. 8TH FLOOR. 120 HOLBORN. 
LONDON ECIN 2TE (GB). 

(81) Designated States (national): AE, AG, AL, AM. AT, AU, 

AZ, BA, BB, BG, BR, BY, BZ, CA, CH, CN, CO, CR. CU, 
CZ, DE, DK, DM, DZ, EC, EE, ES, K, GB, GD, GE, GH, 
GM, HR, HU, ID, IL, IN, IS, JP, KE, KG, KP, KR, KZ, LC, 
LK, LR, LS, LT, LU, LV, MA, MD, MG, MK, MN, MW, 
MX, MZ, ISn, NO, NZ, OM, PH, PL, PT, RO, RU, SC, SD, 
SE. SG, SK. SL. TJ, TM. TN. TR, TT. TZ, UA, UG, US. 
UZ. VC, VN, YU. ZA, ZM. ZW. 

(84) Designated States (regional): ARIPO patent (GH. GM. 
KE, LS. MW, MZ, SD, SL, SZ, TZ, UG. ZM, ZW), 
Eurasian patent (AM, AZ, BY, KG, KZ, MD, RU, TJ, TM), 
European patent (AT, BE, BG, CH. CY, CZ, DE, DK, EE, 
ES, H, FR, GB, GR, HU, IE, FT, LU, MC, NL, PT. RO. 
SE, SI, SK, TR), OAPI patent (BF, BJ, CF, CG. CI, CM, 
GA, GN. GQ, GW, ML, MR, NE. SN. TD, TG). 

Published: 

— with international search report 

[Contir- .i next page] . 



(54) Title: SECURE REMOTE CONTROL 



11 



ControHing Site 5 
12 



Remote Site 3 



Control 




Inner 


DMZ 


Outer 


Station 




Firewall 




Rrewall 




Outer 
Firewall 


DMZ 


Inner 






Firewall 



Control using PCP 



so 



00 




10 



Secure 
Access 
Controller 



Equipment 




Control, 
Equipment 
Proprietary 



Equipment 



2 (57) Abstract: Remote control of equipment located on an organisation's intranet can be achieved by using proxy and client secure 
access controllers which communicate using a peripheral control protocol (PCP) over a predefined port number. By allowing only 
Q outbound connections over the firewall protecting the intranet and using SSL/TLS authentication and encryption, a high level of 
^ security is maintained. A similar arrangement at a control station is used to permit monitoring of equipment at a remote site without 
allowing inbound connections over the firewall which protects the remote station. 
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